ASCOR
ModerateReportedEducation
ASCOR, a French distance-learning training organisation, notified affected people of unauthorised access to a data analytics tool hosted and administered by an external IT provider. The intrusion took place between 18 and 24 August 2026, and the organisation says it was informed on 5 October 2026. Names, email addresses, phone numbers and postal addresses may have been viewed and extracted; the number of people affected has not been disclosed. The organisation states it has filed a complaint and notified the CNIL, and its checks are continuing. The notice does not mention bank data, passwords or identity documents as affected.
These contact details let a malicious third party reach the people directly and craft credible phishing messages referring to a training course or earlier exchanges with the organisation.
- Disclosed on
- October 15, 2026
- Incident dated
- August 18, 2026
- Sector
- Education
- Country
- France
- Cause
- Third-party provider
Exposed data
- Full name
- Email address
- Phone number
- Postal address
You are only affected if you had an account or an order with this organisation.
What you can do
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact